Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4e3b58-63b6-424b-a73d-e31fe54cc5f2.roa
File: cc4e3b58-63b6-424b-a73d-e31fe54cc5f2.roa (raw, json)
Hash identifier: u/PozCxUp5PQafvLnMb+yXtbiC4xC5mJpx+cRSX6RdA=
Subject key identifier: 82:DD:D3:74:C2:AF:1B:B4:B4:43:1A:2C:2A:AB:34:FA:20:C7:60:A2
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0A170AD3E9D0873A3B53ED2822D0368FF54E04B1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4e3b58-63b6-424b-a73d-e31fe54cc5f2.roa
Signing time: Sat 16 Dec 2023 00:00:00 +0000
ROA not before: Sat 16 Dec 2023 00:00:00 +0000
ROA not after: Sat 20 Jan 2024 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:17:0a:d3:e9:d0:87:3a:3b:53:ed:28:22:d0:36:8f:f5:4e:04:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Dec 16 00:00:00 2023 GMT
Not After : Jan 20 23:59:59 2024 GMT
Subject: serialNumber=f23e37c978ed41ad0bdd16593543265ae5812ad6dd7d6dc5ee61ff8f7b3db1de, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:c3:8d:af:08:f0:51:a6:ab:dd:9d:54:8d:
17:5a:ec:f9:79:39:70:02:e9:60:c3:0d:08:47:c2:
26:30:2c:74:03:58:74:50:fb:77:eb:68:2d:cc:c4:
bd:db:99:06:47:8e:c0:89:90:8a:4e:d0:13:c5:90:
55:f9:7d:7d:6d:07:fd:20:69:c6:4d:fa:4d:c9:9a:
63:9b:e4:fd:ee:cc:09:0c:58:0b:54:79:92:27:0b:
e6:f1:e4:a9:64:49:2d:03:e0:5d:e8:61:c6:24:02:
2d:41:e2:f7:dc:96:6d:48:79:ce:65:e0:1d:fa:17:
31:fb:1a:47:60:d3:66:bd:50:1b:a9:35:c6:87:b1:
e2:ad:d1:c0:a4:34:f1:12:93:ca:b1:93:2e:2c:bd:
81:28:af:43:a2:b1:4e:91:58:1a:32:66:10:11:82:
4d:9c:7c:7b:d2:e4:13:f1:2c:94:aa:7a:f1:d8:d0:
df:e8:f1:ce:fb:3d:68:0c:95:66:69:08:40:c1:be:
fb:2d:5e:eb:c5:ed:7b:44:ad:2a:aa:f8:a6:6b:d6:
c6:c3:1c:8d:c2:54:3f:55:b4:b7:f8:f1:6d:09:dd:
44:52:6b:bc:ca:8d:54:71:fd:1a:87:b3:6e:c0:48:
d3:be:1f:1e:af:4e:3f:f9:a1:5a:64:92:7e:b1:93:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DD:D3:74:C2:AF:1B:B4:B4:43:1A:2C:2A:AB:34:FA:20:C7:60:A2
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cc4e3b58-63b6-424b-a73d-e31fe54cc5f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a6:a8:cd:fd:7e:f4:df:ee:cf:8b:5e:83:d5:3b:a9:02:25:
c9:5a:52:7e:7e:1b:00:78:85:f9:46:6c:cd:93:d7:15:3b:23:
5f:63:da:16:71:29:2d:da:fb:df:7a:ad:35:7c:0c:bd:68:09:
8a:79:76:38:c6:65:f8:e4:bf:24:e1:e0:81:6d:8a:0e:0b:ac:
85:a7:69:0a:18:10:38:38:0a:7a:7e:8c:0e:bd:d1:70:86:70:
2b:b3:d6:0a:b5:a0:72:f2:01:e3:67:f3:4f:6f:1c:d5:c3:ab:
55:b1:80:18:f4:15:55:a4:b6:73:96:b0:c6:a6:81:88:4b:37:
d9:49:83:e9:23:88:07:e8:a3:b6:19:ea:27:b4:14:51:8c:d9:
20:d4:1c:fd:0a:35:6a:00:89:fc:91:ab:35:2c:bf:3f:ae:35:
a0:c6:18:78:28:56:33:ce:2c:ca:85:bb:46:a0:08:5a:6f:46:
0e:98:34:54:aa:0f:4c:2b:bc:bc:9a:41:ec:77:42:53:9d:32:
26:51:88:a1:c8:b8:a4:0f:ad:cc:12:62:fe:77:d4:05:fb:ab:
37:de:8e:a7:26:7f:0c:96:67:cb:e4:fc:b7:fd:93:cb:f8:42:
b3:4e:5e:e1:2a:79:e2:18:ae:af:fc:78:6d:bc:40:b6:0f:d1:
07:be:70:16
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUChcK0+nQhzo7U+0oItA2j/VOBLEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMjE2MDAwMDAwWhcNMjQwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjNlMzdjOTc4ZWQ0MWFkMGJkZDE2NTkzNTQzMjY1YWU1
ODEyYWQ2ZGQ3ZDZkYzVlZTYxZmY4ZjdiM2RiMWRlMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAXsONrwjwUaar3Z1UjRda7Pl5OXAC6WDDDQhHwiYwLHQD
WHRQ+3fraC3MxL3bmQZHjsCJkIpO0BPFkFX5fX1tB/0gacZN+k3JmmOb5P3uzAkM
WAtUeZInC+bx5KlkSS0D4F3oYcYkAi1B4vfclm1Iec5l4B36FzH7Gkdg02a9UBup
NcaHseKt0cCkNPESk8qxky4svYEor0OisU6RWBoyZhARgk2cfHvS5BPxLJSqevHY
0N/o8c77PWgMlWZpCEDBvvstXuvF7XtErSqq+KZr1sbDHI3CVD9VtLf48W0J3URS
a7zKjVRx/RqHs27ASNO+Hx6vTj/5oVpkkn6xk3ahAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgt3TdMKvG7S0QxosKqs0+iDHYKIwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2NjNGUzYjU4LTYzYjYtNDI0Yi1hNzNkLWUzMWZlNTRjYzVmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBACmmqM39fvTf7s+LXoPVO6kCJcla
Un5+GwB4hflGbM2T1xU7I19j2hZxKS3a+996rTV8DL1oCYp5djjGZfjkvyTh4IFt
ig4LrIWnaQoYEDg4Cnp+jA690XCGcCuz1gq1oHLyAeNn809vHNXDq1WxgBj0FVWk
tnOWsMamgYhLN9lJg+kjiAfoo7YZ6ie0FFGM2SDUHP0KNWoAifyRqzUsvz+uNaDG
GHgoVjPOLMqFu0agCFpvRg6YNFSqD0wrvLyaQex3QlOdMiZRiKHIuKQPrcwSYv53
1AX7qzfejqcmfwyWZ8vk/Lf9k8v4QrNOXuEqeeIYrq/8eG28QLYP0Qe+cBY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:03:10 2025 by rpki-client